Microsoft Edge Exposes Bing API Addresses of Attended Sites
Users have noticed that a bug seems to have crept into Microsoft Edge - the fact is that, starting with build 112.0.1722.34, the browser passes all the URLs that users…
Clop and LockBit Ransomware Exploit Fresh Vulnerabilities in PaperCut
Microsoft has linked recent attacks on PaperCut servers to ransomware operations by Clop and LockBit, which used vulnerabilities to steal corporate data. In March 2023, print management solutions provider PaperCut…
PaperCut Vulnerability Allows RCE, Exploited in the Wild
PaperCut NG/MF administrators should restrict public web access and follow the current vendor patch guidance. The 2023 remote-code-execution and data-exposure flaws described below are separate from the actively exploited 2026…
New SLP Vulnerability Allows 2200x DDoS Amplification
A recently-discovered vulnerability in SLP, a legacy network protocol, can be used for disastrous increasing in DDoS-attack efficiency. As researchers say, the use of SMP vulnerability can push the amplification…
Supply Chain Attack Leads to 3CX Hack and Other Supply Chain Attacks
An investigation into the 2023 3CX compromise showed a rare but important pattern: one software supply-chain attack helped enable another. Mandiant reported that a trojanized X_TRADER installer from Trading Technologies…
Capita Hacked, Black Basta Gang Publishes Data
Capita, a London-based international business process outsourcing company, was hacked recently. Users noticed strange events in the company earlier this month, but the confirmation appeared only on April 20, 2023.…
Medusa Groups Claims That It “Merged” the Source Code of Bing and Cortana into the Network
Medusa extortionist group claims to have published internal materials stolen from Microsoft, including the source codes of Bing, Bing Maps and Cortana. Microsoft representatives have not yet commented on the…
Chinese Hackers Use Google Command & Control Capabilities in Attacks
Google experts have warned that the Chinese "government" hack group APT41 is abusing the red team's GC2 (Google Command and Control) tool. According to experts, GC2 was used in attacks…
How to Know If You Got Scammed: Signs and What to Do First
Think you got scammed? Check the clearest signs, protect your money and accounts in the first 10 minutes, secure a device a scammer touched, and avoid recovery scams.
Legion Hacker Tool Used to Steal Data from Poorly Protected Websites
Experts have discovered a Python-based Legion hacking tool that is sold via Telegram and is used as a way to hack into various online services for further exploitation. Let me…
LockBit Releases World’s First macOS Ransomware
LockBit, an infamous ransomware gang that became a major threat actor over the last two years, released the variant of its ransomware for macOS. Previously, this system was considered safe…
Domino Backdoor is Lead by FIN7 and Conti Actors
A new Domino Backdoor popped out at the beginning of 2023. Since February, a new malware family coined Domino is used for attack on corporations, having Project Nemesis stealer as…
